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Unlock 
Digital Africa 


Imagine a world: 


that is safe, accessible, honest — 
and clear of fraud. 

A digital economy rich in 
innovation and possibilities 

where technology services are 
accessible to everyone, 

and Africans everywhere are never 
excluded. 

No boundaries, no closed doors. 


Imagine a fast-growing economy: 
where business growth is not held 
back by redundant bureaucracy, 
nor is it threatened by duplicity. 

A world where digital trust is the 
norm. 


That is the world that we believe in 
and are committed to building. 

At Smile ID, we are here to build 
and secure the infrastructure that 
unlocks Digital Africa 

and helps businesses build a 
trusted user base. 


Building a 
trusted user base: 


The importance of identity infrastructure in Africa 
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With over 54 countries and 
1.4 billion inhabitants, 
identity infrastructure is 
pivotal in Africas burgeoning 
digital economy, fostering 
financial inclusion and 
enhancing service delivery. 


However, nearly 500 million Africans still lacked 
legal identity documentation as of 2020, as per 
the World Bank's ID4D Global Dataset, 
indicating a vast potential for identity 
verification solutions to bridge this gap. 


Identity verification providers are especially 
vital in Africa's burgeoning fintech and banking 
sectors, where they can help mitigate fraud and 
enhance trust in digital transactions. The 
African Development Bank estimates that 
Africa's digital economy could reach $180 
billion by 2025, with secure digital identities 
being a cornerstone of such growth. McKinsey 
also forecasted that digital identification could 
unlock a value equivalent to 3-13% of GDP in 
2030 for African economies, particularly in the 
finance, agriculture, and healthcare sectors. 
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Against this backdrop, we present Smile ID’s H1 
2023 State of KYC in Africa Report, offering 
insights into the critical role of Know Your 
Customer (KYC) processes & regulations in 
shaping the digital ecosystem. 


As a pioneer and leading provider of 
identity verification solutions in Africa, 
Smile ID is uniquely positioned to offer 
insights into the evolving KYC landscape. 


Our expertise, coupled with our extensive 
network spanning the continent, enables us to 
thoroughly examine the latest trends, regulatory 
developments, and fraud patterns in the African 
digital identity verification space. 


In this report, we delve into the state of identity 
verification across various African countries. We 
also look closely at the fraud trends and how 
businesses can leverage identity verification to 
safeguard their operations. 


Value of Africa’s digital 
economy by 2025 


4908 Source: Africa Development Bank 
We trust that you will find the insights in this 

report valuable as we navigate the evolving 
digital landscape together. As always, Smile ID 
remains committed to providing the most 
accurate, reliable, and inclusive identity 
verification solutions, enabling businesses 
across Africa to unlock the full potential of 
digital transformation. 


This report uses anonymized data collected from transactions on the Smile ID’s production environment. 
It is our best effort to reflect trends on the African continent but may not reflect every market. 
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Key Takeaways 


Biometric verification reduces 
fraudulent users by 50%. 


In 2023 so far, 43% of ID frauds caught were 
face mismatches indicating that stolen or 
lost IDs were used, while 41% were selfie 
spoofs. 


EES 


Textual verification alone is insufficient for 
ID verification, as most fraudsters can only 
be identified through biometric checks. 
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Being the more accessible and secure 
option, facial recognition is the most 
preferred biometric KYC method worldwide. 


ID databases remain critical 
infrastructure for real-time 
verification. 


es 
= ele 


Local ID databases remain the most robust 
source of truth for KYC, but frequent downtime 
(on average 3%) remains an obstacle. 


wv) 


Document Verification ensures uptime 
during ID Database downtime. 


> 


It is also a better, more effective and more 
reliable way to launch in multiple markets 
with one integration. 


Adoption of digital identity is 
growing across Africa. 


Ethiopia begins enrollment for foundational 
Fayda ID. 


=|= 


Kenya to introduce Unique Personal 
Identifier to replace Huduma Namba. 


Le 


Uganda to launch new digital ID scheme in 
Q4 2023. 
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Key Takeaways 


3X% growth in female ID 
verifications in Africa 


35% 


Gender inclusion is growing on the continent 
with female ID verifications rising 
from 10% to 35% in the last 2 years. 


&,. 


BNPL leads the way in gender inclusion with 
an average of 30% female users over time- 
period. 
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Banking and Lending is the most improved 
industry, growing from 9% to 36%. 


Onboarding fraud rates 
declined by 5% in focus 
markets, led by declines in 
South Africa and Ghana. 


wv) 


Over the years, incentive-based acquisition 
has had a high correlation with increased 
fraud attempt rates. 


-5% 


The 5% decline in fraud rates coincides 
with declining startup funding across the 
continent and has resulted in reduced 
marketing spend. 


+(% 


In contrast to others, Fraud in Kenya has 
increased by 7% over the last six months, 
with the National ID being the most 
attacked. 


11 African countries are now 
on the FATF'’s grey list. 


IN 
<> 
South Africa, Cameroon and Nigeria are now 


on the FATF'’s grey list joining countries like 
Uganda, Senegal, & South Sudan. 


& 


=~ 


Regulations for accountable businesses 
are expected to evolve in the coming 
months. 


Now more than ever, businesses across 
Africa must ensure their KYC/AML 
procedures are on par with international 
best practices. 
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Identity Verification 
Landscape in Africa: 
Trends and Insights 
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Scale: 75 million checks 
and counting 


The first half of 2023 has seen African businesses embrace digital 
transformation with renewed vigour. As a result, the demand for accurate and 
seamless identity verification solutions has skyrocketed. We've witnessed this 
trend firsthand, having conducted over 75 million KYC checks since inception - 
an increase of over 50% in just six months. 


Several factors drive this growth: the increasing adoption of digital platforms by 
businesses of all sizes, the growing importance of regulatory compliance, and the 
need to mitigate fraud. 


Leveraging our expertise from previous years, in this report (our third), we 
deepen our exploration of KYC and digital ID trends and the impact of evolving 
regulations in Africa. As we progress through 2023, we remain committed to 
delivering the most accurate and reliable identity verification solutions, and we 
are confident that we will continue to play a vital role in enabling businesses on 
the continent to unlock the full potential of digital Africa. 
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KYC Checks by Smile ID 


Cumulative checks over time 


m™ Total KYC Checks (cumulative) mm Fraudulent KYC Checks (cumulative) 


80M 


60M 


40M 


20M — 


Jan 2019 Jan 2020 : Jan 2021 Jan 2022 Jan 2023 


Note on chart and data set: 

This report uses anonymised data collected from transactions on Smile ID. Fraudulent KYC checks include biometric 
fraud and data validation errors when checking against the government ID database. Data in this chart was collected 
from 2018 to June 2023. 
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Speed: Onboarding 
users faster than ever 


6 
<2 Sec 
Onboarding 


STATE OF KYC IN AFRICA ans 


Q)NG Nigeria NIN V2 2s 

qd) NG Nigeria Phone Number 2s 
In major markets such as 

QODNG Nigeria BVN 3s 
Nigeria, Ghana, Kenya, and 

. . Po KE Kenya National ID 2s 
South Africa, Smile ID has 
° N South Africa National ID 

reduced the average time ata No phets : 
for verification of the most One Nigeria Voter 1D is 
popular IDs to a mere 

<a GH Ghana New Voter ID 1s 
1.93 seconds. 

@& uG Uganda National ID No photo 2s 
This remarkable achievement allows businesses @cu Ghanalpriveralinense Ae 
to onboard a vast number of users rapidly while 
meeting customer expectations for speed. 2cu ee ee oe 
Furthermore, our coverage of the most popular 
IDs per country ensures that businesses can cater () NG Nigeria BVN MFA Is 
to a diverse range of users. In Nigeria, for instance, 
where businesses are allowed to open tiered ae KE Kenya National ID No photo 3s 
accounts for users based on transaction and 
balance limits, Smile ID supports the 2 cu Ghana SSNIT . 
recommended ID types for each tier, including 
Phone Number, Bank Verification Number (BVN), 
and National ID (NIN). He Kenya Passport 2s 

Pio KE Kenya Drivers License 3s 


Note on chart and data set: 
This report uses anonymized data collected from transactions on Smile ID. Data in this chart was collected from January to June 2023. 
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Gender Distribution of Digital Identity Checks by Smile ID 
% of KYC checks, by Gender 


Inclusion: = 


Closing the gender gap ee 


Inclusion is widely regarded as one of three pillars for building 
equitable and universal ID systems that ensure no one is left 
behind. As such, it is critical to examine inclusivity in ID verification 


= Male m= Female 


. ee . a ce a rire ° _ 
systems. Without examining inclusivity, disparities in access and a ——2s 
use may continue to go unaddressed, resulting in mass _—— 
disenfranchisement. O% 
Q3 2021 Q4 2021 QI2022 Q2 2022 Q3 2022 Q4 2022 Q1 2023 Q2 2023 


Data from Q3 2021 until now show that there has been a significant 
Dee eee aan % Female Digital Identity Checks by Smile ID for Banking, 
Credit and Financial Inclusion Services 


Since the third quarter of 2021, the percentage Si al ieieehseks bo) Gene 


of female ID verification checks carried out m= buy Now Pay Later Banking Lending Remittances 
using Smile ID has grown from 10% to 35% in om 

the first half of 2023. This indicates positive 

progress in addressing gender disparities. ~ 


When analysed by industry, BNPL companies have led the way with 
an average of 30% of verified IDs belonging to female users since 
2021. 

On the other hand, banking and lending companies have made the 

most improvements regarding gender inclusion, increasing 


onboarded female users from 9% to 36%. °% 93.2021 Q4 2021 Q1 2022 Q2.2022 Q3 2022 Q4 2022 Qi 2023 Q2.2023 


Note on chart and data set: 
This report uses anonymised data collected from transactions on Smile ID. Data in these charts was collected from July 
2021 to June 2023. 
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Fraud: down, but not out 


In the first half of 2023, we saw fraudulent onboarding attempts fall across Africa 
as compared to the previous year. In H1 2023, the total number of fraudulent 
KYC attempts caught by Smile ID decreased by 5 points to 23% from a peak of 
28% in 2022. 


The decline in fraud rates coincides with declining startup funding across the 
continent. Venture funding in Africa dipped by over 50% year-on-year in the 
first half of 2023. More so, the number of startups that received funding dropped 
from 303 in H1 2022 to 131 in H] 2023. This decrease in funding has led to 
reduced marketing spend, especially incentive-based acquisition, which has 
been shown to have a high correlation with increased fraud attempt rates. 


However, with cybercriminals persistently adapting, businesses must stay vigilant 
in combating fraud. While referral fraud rates have dropped significantly, 
cybercriminals are still looking to exploit digital platforms to scam other users or 
funnel illicit earnings. Based on conversations with our clients, we also believe 
that as digital onboarding formalises, fraudsters are re-focusing their energy on 
transactions rather than account creation; this reinforces the need for multi- 
factor authentication, including biometrics. 


This report explores the latest identity fraud trends and countermeasures, 
examining evolving fraudster tactics and the impact of new product initiatives. 
We aim to empower businesses to protect their customers and contribute to a 
more secure digital Africa. 
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Fraudulent attempts caught by Smile ID 
% of Total KYC Checks 


40% 


30% 


20% 


10% 


O% - 


2020 2021 2022 2023 


Note on chart and data set: 

This report uses anonymised data collected from transactions on Smile ID. Fraudulent KYC checks include biometric 
fraud and data validation errors when checking against government ID databases. Data in this chart was collected from 
2020 to June 2023. 
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As African countries work to centralise their identity databases, national IDs have 
become the most ubiquitous form of identity document. They are also used for 
accessing government services like social welfare programs, paying taxes and 
acting as foundational documents for obtaining functional IDs like passports or 
driver's licences. 


en F F i e Scammers frequently attempt to use forged or stolen national IDs to gain 
erirication IS Critical, 


fraudulent access to regulated services. The implication of this is that 


col lecti ng d oc u mM e nts businesses can no longer afford to stop their KYC processes by just collecting 


documents. 


e 
IS Nn ot e Nn Oo ugh In the first half of 2023, the national IDs of Kenya, Nigeria and South Africa were 


the three most frequently targeted types of IDs for fraud relative to other forms 
of identification across Africa. Specifically, in these three countries, national ID 
cards experienced a higher fraud rate than any other form of ID during the first 
half of 2023. 


Biometric Fraud attempts caught by Smile ID 
% of Total KYC Checks, by ID Type 


13% 13% 
13% 
10% -—— —— ———— ——— Sela Fics ss IS ne PSS a tee Ae tee See S 
8% 
5% --—— --- --- a ---- -—--- a rr 
Note on chart and data set: 
This report uses anonymized data collected from 
3% transactions on Smile ID. Biometric fraud rates are 
measured by Smile ID between January and June 
2023; includes approximately 22 million KYC checks 
across Africa; selected countries and ID types with 
O% 


significant volumes. 


Kenya National ID —_ Nigeria NIN V2 South Africa Ghana New Nigeria Nigeria Nigeria BVN Ghana Drivers Kenya Alien Card 
National ID Voter ID NIN Slip Voter ID License a 


vee < 
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While different ID types may be more vulnerable to particular types of fraud, the majority of ID-related fraud attempts across Africa take one of the following formats: 


peal 
=| 


Selfie Spoofs 


where scammers with stolen IDs attempt to pass 
themselves off as the owners of the documents by using 
a photo to impersonate someone else. This can include 
using a picture of a printout, a saved image or video from 
a device, a printed face mask, or even a lifesize 
cardboard cutout. 


Fraud Types Caught by Smile ID Biometrics 
% of KYC Checks, by Country 


100% 


75% 

50% 
Note on chart and data set: 
This report uses anonymized data 
collected from transactions on 

25% Smile ID. Biometric fraud rates are 
measured by Smile ID between 
January and June 2023; includes 
approximately 22 million KYC 
checks across Africa; selected 
countries and ID types with 

0% Ez 


Nigeria Kenya South Africa Zambia _—Céte d'Ivoire Gabon 


Senegal 


Face Mismatches 


where a valid ID number is provided, but 
facial biometrics do not match the ID. 


fraudulent IDs 


Malawi Botswana Cameroon Tanzania Ghana 


D.R. Congo 


T 


Fraudulent IDs 


these could be counterfeit IDs, unacceptable ID 
types, tampered documents, expired IDs or times 
when an actual ID card was not provided. 


{ face doesnt matchID [ selfie spoof 


significant volumes. 


Angola Uganda Rwanda Zimbabwe 


4 
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Fraud trends across the 


four key startup markets 


Convolutional Neural Networks, or layers upon layers of coded logic 
that look for features or patterns, have driven major advances in 
computer vision in the last five years. These advances have 
enabled high accuracy even in challenging image conditions such 
as low-lighting environments or partially obscured images. These 
technologies have proven particularly beneficial during the 
onboarding process in African markets, where image quality and 
capture conditions can vary dramatically. 


As more businesses across Africa adopt biometrics for identity 
verification and fraud prevention, more fraud is being caught, and 
more valid users who may have previously been rejected due to 
poor image quality are approved, helping improve onboarding 
conversion metrics and customer satisfaction. 


ww.usesmileid.co 


Biometric Fraud attempts caught by Smile ID 
% of Total KYC Checks, by country 


= Ghana = Kenya == Nigeria — South Africa 


30% 


20% 


10% 


0% 
Jul 2021 Jan 2022 Jul 2022 Jan 2023 Jul 2023 


Note on chart and data set: 

This report uses anonymized data collected from transactions on Smile ID. Biometric fraud rates are measured 
by Smile ID between July 2021 and June 2023; includes approximately 10 million KYC checks across Africa; 
selected countries and ID types with significant volumes. 
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Kenya and South Africa in Focus 


After seeing record-low numbers in H2 2022, 
fraud in Kenya is rising again. In the first half of 
the year, fraud attempts grew from 10% in 
January 2023 to 17% in June 2023. However, 
even though there has been a significant 
increase, fraudulent onboarding attempts are 
still below the figures recorded in H1 2022. The 
recent increase in fraud attempts makes Kenya 
the highest-risk country for ID fraud compared 
to the other countries analysed — a position it 
has not held since H1 2022. 


After finishing in December 2022 as the 
country with the highest risk for ID fraud, we 
have observed a significant drop in ID fraud 
rates in South Africa. Between January 2023 
and June 2023, fraud rates in South Africa 
dropped from 17% to 8%. These figures make 
South Africa the lowest-ranking country for 
onboarding fraud and the only country with a 
single-digit percentage of fraud attempts. 


As we continue to monitor these trends, it 
becomes evident that the battle against 
biometric fraud is ongoing, requiring constant 
vigilance and the implementation of innovative 
strategies to safeguard the security of identity 
verification systems across these countries. 
Fraud rates move up and down across 
countries as growth and user behaviour 
changes in response to new products, services 
or changes in regulations. 


The biometric KYC solution at Smile ID involves 
matching a user's submitted selfie with the 
photo on their government-issued ID 
documents. This approach combines the 
reliability of document verification with the 
added assurance of biometric verification, 
ensuring that your users are indeed who they 
claim to be, and has proven to reduce 
fraudulent users by 50%. 
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BNPL fraud rates drop 
significantly; Crypto and 
Payments on the rise 


Identity fraud rates in the BNPL industry have fallen to a record low 
of 4% from 37% in the previous time frame. 


In contrast, Africa’s cryptocurrency sector continues to grapple with 
high fraud rates, while the payments and remittances industries are 
witnessing a marked increase in fraud from last year. 


A thorough analysis of fraud across various industries reveals that all 
sectors experience significant biometric fraud attempts that go 
unnoticed when using textual checks alone. In particular, the 
payments sector could greatly benefit from biometric solutions due 
to its reliance on high volumes of text-only validation, which involves 
non-biometric jobs where users only submit an ID number for 
verification against a database. 


Relying solely on textual KYC can lead to 50% more 
undetected fraud, as most fraudsters can only be identified 
through biometric checks. 


By incorporating biometric verification methods, businesses can enhance their 
security measures, better detect fraudulent activities, and protect their platforms 
and users. As the payments and remittances industries continue to grow in Africa, 
integrating biometric solutions will be crucial for maintaining trust and ensuring 
the safety of transactions within these sectors. 
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Biometric Fraud Rate by Industry 


% of total within industry; Africa average 


15% 


15% 


13% 13% 


10% 
10% 10% 


9% 
7% 


5% 


4% 


0% 
Crypto Payments Remittances Banking & Professional Investments & Other Buy Now Pay 
Lending Services Saving Later 


Data Validation Fraud Rate by Industry 


% of total within industry; Africa average 


10% 


8% 


7% 
5% 
3% 
0% 


Payments BuyNow Pay Professional Other Remittances Banking & Investments & Crypto 
Later Services Lending Saving 


Note on chart and data set: 

The biometric and data validation/textual KYC charts reflect different companies based on their usage of Smile ID. As such, 
not all categories are represented as we exclude certain categories that don't pass a statistically significant threshold in 
volume. This report uses anonymised data collected from transactions on Smile ID between January and June 2023; includes 
approximately 22 million KYC checks across Africa; selected countries and ID types with significant volumes. 
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National ID database 
uptime is improving in 
2023 


The first half of 2023 has seen a significant improvement in the uptime of 
national ID databases across Africa compared to the second half of 2022. In 
FY2022, the average downtime during a 24 hour period was 6%, with a maximum 
downtime during a day of 63% and 37 days with 10% or more downtime. 
However, in H1 2023, the average downtime has reduced to 3%, witha 
maximum downtime of 18% and 19 days with 10% or more downtime. 


Though there has been a significant improvement, the fact is frequent database 
downtimes are still a major obstacle to real-time verification, and relying solely 
on national ID databases can lead to interruptions in business continuity. 


To mitigate downtime and provide coverage where reliable national ID databases 
do not exist, Smile ID offers Document Verification, a comprehensive and global 
solution for onboarding. Document Verification involves collecting and verifying 
user-submitted identity documents. 


Document Verification is a better, more effective and more reliable way to launch 
in multiple markets or handle users from different countries with one integration. 
It serves as the primary source of truth, allowing businesses to combine 
biometric checks and government checks to enhance their onboarding fraud 
prevention strategies. With Document Verification, businesses can ensure the 
integrity of their identity verification systems, even during national database 
downtimes. 
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Daily ID Database downtime 
Measured as the % of KYC checks by Smile ID that could not be completed; Africa average 


80% 


60% 


40% 


20% 


nae 2022 Apr 2022 Jul 2022 Oct 2022 Jan 2023 Apr 2023 
FY2022 H1 2023 
Average Downtime within 24 hours 6% 3% 
Max Downtime within 24 hours 63% 18% 
Days w/ 10%+ downtime 37 19 


Note on chart and data set: 
This report uses anonymized data collected from transactions on Smile ID between January and June 2023; includes 
approximately 22 million KYC checks across Africa; selected countries and ID types with significant volumes. 


19 a 


STATE OF KYC IN AFRICA 


ww.usesmileid.co 


some ID types | “es seading to eemice deuce 
ome ID types experience more downtime, leading to service disruptions for 
ex pe ri e n Cc e Mm Oo re users accessing these platforms. Nevertheless, in the past six months, all ID 


types have improved. The ID type with the most downtime had 107 days, 


f t d ti compared to 140 in 2022. Smile ID clients can switch between popular ID types 
req U e Nn own | mM es to reduce disruptions for their business and end users. 


Days with more than 10% Downtime comparison between Full Year 2022 and H1 2023 
During 365 day period from Jan to Dec 2022 and 180 day period from Jan to June 2023; measured by the % of KYC checks that could not be completed 


@ 12023 ™ FY2022 
150 


ID Type #1 ID Type #2 ID Type #3 ID Type #4 ID Type #5 ID Type #6 ID Type #7 ID Type #8 ID Type #9 ID Type #10 ID Type #11 ID Type #12 ID Type #13 ID Type #14 ID Type #15 


Note on chart and data set: 
This report uses anonymized data collected from transactions on Smile ID between January and June 2023; includes approximately 22 million KYC checks across Africa; selected countries and ID types with significant volumes. 
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Foundational vs Functional 


ID document types 


Collecting and verifying ID documents is critical to every AML/CFT framework, as ID documents provide proof of legal identity. Historically, government-issued IDs 
are required for these processes. However, recent conversations in the KYC/compliance communities have sought to distinguish between the types of 


government-issued documents. 


Types of government-issued ID documents can be generally grouped into two classes: 


Foundational ID documents 


These are general-purpose documents that provide proof of 
legal identity. They typically help to identify the general 
population and can be used as proof of identity for all kinds of 
transactions. A National ID card is the most common example 
of a foundational ID document. However, some countries may 
use a national identification or social security number. 


“FEDERAL REPUBLIC OF NIGERIA 
DIGITAL NIN SLIP 


SURNAME/NOM 
RESIDENT 


Example: National Identification Number 
Issuing agency: National Identity Authority 
Purpose: Legal Identifier 

Validity: Lifetime 


GIVEN NAMES/PRENOMS 
PROUD, NIGERIAN 


DATE OF BIRTH SEX/SEXE 
01 ocT 1960 F 


National Identification Number (NI 


0000 000 0000 


Functional ID documents 


These documents are used for specific sectors or use cases, 
e.g. voting, taxation, travel, insurance and more. In countries 
where foundational ID documents are either not available or 
accessible, functional ID documents are often used as the de 
facto proof of identity. 


Example: Nigeria International passport 

Issuing agency: Nigeria Immigration Service 
Purpose: Travel document 

Validity: 5 - 10 years, depending on passport type 


P<NGADEBOYEWA<<ADEBOYE < USMAN < < <<<<<<<<<<<< 
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Country Deep Dives: 
KYC Compliance 
Across Africa 
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In the first half of 2023, the Financial Action Task Force (FATF) added South 
Africa, Nigeria, and Cameroon to its Grey List, bringing the total number of 
African countries on the list to 11. Other countries on the list include Burkina Faso, 


e the Democratic Republic of Congo, Mali, Mozambique, Senegal, South Sudan, 
The Big Sto ry: So uth Tanzania, and Uganda. 
e e e 
Africa Ni ige ri | & Greylisting by the FATF implies that a country has been identified as having 
9 


strategic deficiencies in its anti-money laundering (AML) and counter-terrorism 
Ca Mm e roo n n OW oO n FAT E financing (CTF) regimes that they must fix within an agreed timeframe. While on 

the greylist, businesses and consumers in these countries can be subjected to 

additional compliance requirements and international trade restrictions. Here’s a 


e 
grey | ist summary of the FATF’s assessment of the three countries. 


—. 
wi 


Nigeria South Africa Cameroon 

The FATF's assessment found that Nigeria The FATF's assessment found that South The FATF found that while Cameroon had 
had made progress in addressing some of Africa had a solid legal framework for made some progress in addressing its 
the deficiencies but still had work to do in combating money laundering and deficiencies, it had work to do in 

areas such as customer due diligence, terrorist financing but had significant developing a risk-based AML/CFT 
suspicious activity reporting, and the shortcomings in its implementation. framework and investigating and 
regulation of non-profit organisations. prosecuting offenders. 


Qe 
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We expect the recent additions to the How businesses should respond: 
FATF grey list to sign ificantly impact As with all other countries on the greylist, Nigeria, South Africa, and 
the KYC ecosystem on the continent Cameroon have committed to improving their respective AML/CFT 
: regimes, meaning that all three nations can be expected to introduce 
due to the growl ng number of new regulations for accountable organisations. South Africa leads the 
0 : 6 way already, announcing amendments to its AML/CFT laws in the first 
countries on the list and the profile of halkot the.veae 
exelulaldalsys NOW involved. Nigeria and Now more than ever, businesses across Africa 
0 ¢ | ¢ must ensure their KYC/AML procedures are 
South Africa are Africa S two biggest on par with international best practices. With 
c c the global focus on combating financial 
Economies representing crimes intensifying, companies operating in 
approximately 30% fey the continent's the continent must prioritise robust KYC/AML 
: procedures to safeguard their operations, 
GDP. and regu lators and investors protect their reputation, and contribute to 
4 ; c the overall integrity of the financial system. 
apply more scrutiny when dealing with Companies must also be nimble, staying up- \ 
. : . to-date with regulatory developments and 
transactions from greylisted countries. eesulne che nee inine enaechi- tion 
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Nigeria 
The National Identification Number (NIN) issued by the National 
KYC Verification Requirements: Identity Management Commission is the foundational ID 
document for identity verification in Nigeria. It has the widest 
coverage of any ID document, with over 100 million enrollees. 
Functional IDs used for identity verification in Nigeria include the 
Accepta ble ID Documents: Voter's ID card, International Passport, Driver’s License and BVN. 
NIN, National ID Card, BVN, Driver's License, Passport, Voters ID 


Name, Date of Birth, ID Document 


KYC Data Storage Period: NIN enrollment crosses 100 million 
ge registration benchmark 


Data Compliance Regulation: 


NGr anal Date hreiecuon bil By the end of May 2023, Nigeria’s National Identity Management 


Commission (NIMC) crossed the 100 million benchmark for the 
number of unique registrations. This achievement solidifies NIN’s 
standing as the most widely-held identity document in the 


country. 
ree In recent months, the NIMC has scaled its infrastructure to enroll 
anil [a= more Nigerians into its database by working with telecoms, agent 
Population Population with ID networks and other institutions to increase registrations and 


awareness. 


The benchmark brings Nigeria closer to the World Bank's 
; recommendation of enrolling 148 million by June 2024, a goal that 
a areal authorities are confident about meeting. 


Median Age Primary ID Issuer 


Population with ID represents people 15 years+ Source: National Identity Management Commissio. 
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Source: 


New policy empowers banks 
to issue debit cards as ID 
documents 


To increase access to physical versions of the national ID card, 
Nigeria’s Federal Executive Council has approved a policy allowing 
commercial banks to issue debit cards that double as identity 
documents. 


Over the last few years, the Nigerian government has sought to 
increase the coverage of its identity database by making National 
Identity Number (NIN) enrollment mandatory for bank account 
ownership and sim card usage. While enrollment efforts have been 
successful, access to physical documents is still low. 


Legally, the NIN is the only requirement for identifying Nigerian 
citizens and residents, and it is typically issued a few weeks after 
enrollment. The National Identity Management Commission (NIMC) 
also launched a mobile app in 2021 that allows users access to an 
e-ID. However, demand for physical cards remains high, especially 
in rural regions where many people don't have access to the NIMC 


app. 


Following the recent announcement, banks will be able to print 
multipurpose debit and credit cards that double as physical 
versions of the holder’s national ID card at no extra cost. This move 
is expected to increase access to physical ID documents for users 
in both urban and rural regions. 


ww.usesmileid.co 
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South Africa —\~ 


KYC Verification Requirements: 
Name, Date of Birth, Phone Number, ID Document 


Acceptable ID Documents: 
Smart ID Card, Green Card, Driver's License, Passport 


KYC Data Storage Period: 
10 years 


Data Compliance Regulation: 
Protection of Personal Information Act (POPIA) 


re 
éuil |S] 


Population Population with ID 


si? Tall 


Median Age Primary ID Issuer 


Population with ID represents people 15 years+ 
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The Smart ID card issued by the South African Department of 
Home Affairs is the foundational ID document for identity 
verification in the country. It was introduced in 2013 to replace the 
older Green Booklet. Functional IDs like a passport, driver's 
licenses, and resident cards can also be used to verify identities. 


Identification Bill Proposes an 
Integrated Biometric System for 
South African Residents 


In February 2023, South Africa’s Ministry of Home Affairs announced a 
new National Identification and Registration bill that aims to introduce 
a single, integrated biometric national identification system for all 
persons living in South Africa. 


Currently, South Africa has three independent databases for people: 
the national population register, the biometric national identity system 
and the visa adjudication system. The newly proposed integrated 
database will homogenise all three databases and contain the identity 
information of everyone resident in South Africa, including citizens, 
legal residents and visitors. 


In addition to the integrated database, the new bill proposes reducing 
the legal age for obtaining a national ID card from 16 to 10 years. 
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> 
Kenya i> 


KYC Verification Requirements: The Kenyan National Registration Bureau issues the National ID 


Name, Address, ID Document card as the foundational ID for identity verification in the country. 
Functional IDs like driver's licenses, international passports, alien 


Acceptable ID Documents: cards, and refugee IDs can also be used to verify identities. 


National ID Card, Driver’s License, Passport, Alien Card, Resident Card 


KYC Data Storage Period: Kenya’s new digital identity is 
pee equipped with biometric features 


Data Compliance Regulation: 
Kenyan Data Protection Act 


More information has been unveiled about Kenya’s soon-to-be- 
implemented digital ID system. The new ID system, known as 
Unique Personal Identifiers (UPI), is earmarked for roll out in 
September 2023. 


In May 2023, the Kenyan government announced that it would be 
we equipping the digital id with enhanced security features such as 
oul |2=) iris and facial biometrics and the fingerprint identification system 

: : ; din current identity documents. 

Population Population with ID ve 
The new ID system is expected to create enhanced possibilities for 
online ID authentication and give Kenyans more control over 
sharing their personal data. 


ai? Tall 


Median Age Primary ID Issuer 


Population with ID represents people 15 years+ 
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Ghana 


KYC Verification Requirements: The National Identification Authority issues the Smart Card as the 
Name, Date of Birth, Place of Birth, ID Document foundational ID document for identifying citizens and legal 
residents in Ghana. Functional IDs like an International Passport, 


A table ID D eee Voters ID, Social Security and National Insurance Trust (SSNIT), 
cceptabie ocuments. and resident card can also be used to verify identities. 
Smart Card, Voter's ID, Driver's License, SSNIT, Passport, Resident Card 


KYC Data Storage Period: 17.4 million Ghanaians enrolled 
6 years on the Ghana Card 


Data Compliance Regulation: Speaking at the 2023 ID4Africa meeting in Nairobi, Prof. Kenneth 

Ghana Data Protection Act Attafuah, the Executive Secretary of Ghana’s National Identification 
Authority (NIA), announced that the country’s biometric card 
initiative had registered over 17.4 million holders by April 2023. 


This achievement represents an over 280% increase from 2017 

when the initiative had only registered 4.5 million Ghanaians. The 
sili |2=) agency also stated that 17.2 million cards had been printed for 

registered holders, and 16.2 million had been collected. 


Population Population with ID 
ral 
Median Age Primary ID Issuer 


Population with ID represents people 15 years+ Source: |D4Africa 
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Ghana Drops Age Requirement 
for Ghana Cards 


Ghana has dropped the age of its Ghana Card registration to 
include newborns. This development comes as part of Ghana's 
plan to evolve its national identification system to be on par with 
developed countries around the world. 


In earlier years, the Ghanaian government has sought to ECOWAS IDENTITY CARD . 


standardise the Ghana Card as the primary identity document in ; «) ARTE 1 eG A eT eT Coen —— 
the country, merging it with the Social Security and National CEO EAS nen 

Insurance Trust, National Health Insurance Scheme and Tax : SS) aensair rer 4 
Identification Number, among others. AL apse C) 


Date of Issuan¢ey Date démission 


| Das of rh On ace 
The new policy sees the Ghana Card complete its transition from - cea 


Personal 1D Number’ Size /Tallle Sex Sexton, 
GH000000023 1.85. ‘ 


an identity document to a lifelong identifier for all Ghanaian ans came) 


Place of Issuance / Liou de défivrance 


citizens. While children will now be registered for their Ghana Card aS 
number, it is unclear whether they or their guardians can apply to j 
get the physical card until they reach the age of 15. 


source: hanawel 30 
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Uganda 


KYC Verification Requirements: 
Name, Address, ID Document 


Acceptable ID Documents: 
National ID, Voter’s ID, Driver’s License, Passport 


KYC Data Storage Period: 
10 years 


Data Compliance Regulation: 
Data Protection and Privacy Act of 2019 


re 
anil |S] 


Population Population with ID 


si? Tall 


Median Age Primary ID Issuer 


Population with ID represents people 15 years+ 
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Uganda’s National Identification & Registration Authority (NIRA) 
issues the National ID card as the foundational ID for identity 
verification. Functional IDs like a passport, voter IDs and driver's 
licences can also be used to verify identities. 


Uganda’s NIRA issues over 
26 million NINs 


The National Identification and Registration Authority of Uganda 
(NIRA) announced in May 2023 that it has issued citizens over 26 
million National Identification Numbers (NINs). This brings NIN 
coverage in Uganda to over 95% of the adult population — a feat 
achieved within nine years of the commencement of the ID 
program. 


Despite having extensive NIN coverage, many Ugandans still lack 
physical ID documents. In its statement, NIRA announced that it 
had printed over 19 million National ID cards, but only 16 million 
have been collected, leaving the agency with over 3 million 
uncollected cards. The agency has urged registered Ugandans to 
collect their cards before transitioning to a digital ID system. 


Source: |New Visio 
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Uganda's Digital ID Transition 
Faces Challenges 


In April 2023, the Auditor General of Uganda, John Muwanga, 
raised concerns about the country’s lack of preparation for 
transitioning to the new digital ID cards. ln 2022, Uganda 
announced a transition to a new generation of digital ID cards 
implanted with microchips containing citizens’ electronic and 
biometric information. 


While the transition is expected to commence in 2024, the Auditor 
General expressed doubts about NIRA’s ability to handle the 
transition smoothly, citing a lack of adequate preparation and 
strategising ahead of the commencement date. 


In a follow-up statement, NIRA reiterated that they were still within 


time to prepare for the ID roll out and were in the advanced 
planning stages. 


Source: 
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Rwanda “{ 


Indangamuntu, or the Rwandan national ID, is the foundational ID 

i ee aa eee ae net ee a eee eee eel document issued by the National Identification Agency of 

ATS Verincation hequirements. Rwanda. Functional documents such as driver's license, 

Name, Date of Birth, Passport Photograph, ID Document international passport, refugee ID, and non-citizen ID can also 
verify identities. 


Acceptable ID Documents: 


National ID, Driver’s License, Passport, Refugee Card, Non-citizen ID Rwanda to Expand Digital ID Access 
KYC Data Storage Period: to Stateless Persons and Children 


The Rwandan parliament has commenced the process of creating 
amore inclusive ID system that captures children and stateless 
persons resident in the country. 


Data Protection Law 


The recently proposed amendment to the country’s law on the 
registration of persons and issuance of the national ID card allows 
for the creation of the Rwanda Single Digital System (SDID), which 
the country expects to close gaps in its existing ID architecture. 


ree 

oul |2=) The new scheme, which the World Bank funds, is expected to be 
4 4 A executed within a 3-year period from when the legislative 

Population Population with ID franmien ores pur hiBlace. 
13.9 million 90% 
i? Tra 
Median Age Primary ID Issuer 
20 National Identification Agency 


Population with ID represents people 15 years+ Source: [Pres 
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Tanzania —~ 


KYC Verification Requirements: 


Name, Date of Birth, Place of Birth, Address, ID Document 


Acceptable ID Documents: 
National ID, Voter's ID, Passport, Driver’s License, Health Insurance ID, 
Refugee ID, Resident ID 


10 years 


Data Compliance Regulation: 


Personal Data Protection Act (PDPA) 


re 
sil =) 
Population Population with ID 
65.2 million ~90% 


si? Tall 


Median Age Primary ID Issuer 


18 National Identification Agency 


Population with ID represents people 15 years+ 
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Tanzania’s National Identification Authority (NIDA) issues the 
National Identity Card, the foundational ID for identity verification. 
Voter IDs, driving licenses and international passports are 
functional ID documents that can be used to verify the holder's 
identity. 


Tanzania deactivates 970,000 
unverified sim cards 


The Tanzanian government deactivated 970,000 unverified sim 
cards to reduce fraudulent activities in February. The deactivation 
resulted from non-compliance with the Tanzania Communications 
Regulatory Agency's (TCRA) 2019 directive for all citizens to 
register their sim cards biometrically. 


The sim registration services required telcos to run biometric 
checks against their national ID cards on mobile phone users. 
Although the exercise was initially scheduled to end on January 
31st, the TCRA extended it to February 14 to allow more people to 
register. 


Despite the deactivation of nearly a million sim cards, the 
registration exercise has been largely regarded as a success, as 
60.47 million of 62 million mobile users in the country registered 
before the policy deadline. The exercise has also been linked to a 
rapid drop in cases of sim card fraud. 


Source: veloping Telecoms] 
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Ethiopia 


KYC Verification Requirements: 
Name, Place of Birth, Date of Birth, Address, ID Document. 


Acceptable ID Documents: 
Fayda ID, Kebele ID, Driver’s License, Passport, Resident Card, Non-citizen ID 


KYC Data Storage Period: 
N/A 


Data Compliance Regulation: 
Data Protection Proclamation (Still in Progress) 


re 
anil |S] 


Population Population with ID 
sit ral 
Median Age Primary ID Issuer 


Population with ID represents people 15 years+ 
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The National Identity Program (NDIP), in 2022, started enrollment 
for the Fayda ID, which serves as Ethiopia's foundational ID 
document for identity verification. Currently, the NDIP has enrolled 
just over 1.4 million Ethiopians for the Fayda ID. 


The Kebele ID, which is used to identify a person’s ward or 
residence is currently the most popular ID type, with ID4D placing 
popularity between 90 - 95% among adults. The Kebele ID and 
other functional IDs like driver's licenses, international passports, 
non-citizen IDs, and resident cards can verify the holder's identity. 


Ethiopia Passes Digital ID Law 


In March 2023, Ethiopian lawmakers announced the approval of 
the country’s Digital Identity Proclamation bill into law. This bill 
makes Ethiopia the latest in a growing list of African countries 
migrating to a digital ID system. 


Ethiopia's digital ID bill is expected to help the country establish a 
comprehensive, consistent and reliable system for the registration 
of citizens. The bill covers various issues, including registration, 
authentication services, the institutional framework, data security, 
privacy protection, and criminal liability. 


It has been hailed as an important step in modernising the 
country’s ID system and is expected to have multiple benefits, 
including improving national development and enhancing 
inclusiveness. 


Source: Addis Standara 
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Fayda ID to become mandatory 
for financial transactions 


The National Bank of Ethiopia, and the National Identity Program in 
July, made a joint statement announcing plans to make the 
country’s national digital ID, Fayda, mandatory for all transactions. 
According to a 2017 report, 34.83% of Ethiopia’s adult population 
(~23.7 million people) had bank accounts. 


Per early statements, the initiative will mandate bank customers to j 
use the Fayda ID as their bank ID for KYC checks and completing Ee SRE eae aie mace nce Bsns, 
remote onboarding. This joint initiative is expected to help the : 


country achieve its goal of 45 million enrollments in 2024 by is ; Tost Test Tost 


making more people enroll for the Fayda ID. The National Bank of ; ’ ae 
Ethiopia, which is the country’s central bank has also assured that ‘ ar Seale 
the plan to use the Fayda as primary ID for banking operations will sce 
significantly improve transparency, stability and security in 
Ethiopia's financial sector. 


WI FCN 01234567889 
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Egypt “~ 


KYC Verification Requirements: 
Name, Address, ID Document 


Acceptable ID Documents: 
National ID, Passport, Driver’s License, Resident ID 


KYC Data Storage Period: 


5 years 


Data Compliance Regulation: 
Personal Data Protection Law 


re 
anil |S] 


Population Population with ID 


si? Tall 


Median Age Primary ID Issuer 


Population with ID represents people 15 years+ 


ww.usesmileid.co 


The Egyptian Civil Status Department issues a National ID card as 
the foundational ID document for all residents and citizens. As of 
2021, ID ownership was around 93% of the country’s adult 
population. Driver Licenses, passports and resident cards are 
functional IDs that can be used to verify identities. 


Egypt to Implement 5-Year Tax 
Exemption for Startups 


In line with its goals of encouraging technological innovation, the 
Egyptian government has declared a 5-year tax exemption for 
startups in the country. 


Over the last five years, Egypt has become Africa’s third most 
popular destination for startup investment, attracting over $1.5 
billion. The success rate of Egyptian startups with fundraising and 
building technology solutions has seen the country emerge as the 
flag bearer for innovation in North Africa. 


The exemption will be made via legislative amendments to the 
existing Small and Medium Enterprises Law (Law Ne152 of 2020), 
which will be presented to the parliament for approval in the 
coming weeks. 
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Egyptian Financial Regulatory 
Authority Issues New 
Regulation for the Use of 
Digital Identity by Non- 
Banking Entities 


The Egyptian Financial Regulatory Authority (FRA) issued new 
regulations on Wednesday, 12 July 2023, authorising the use of fin- 
techs and outsources services by non-banking financial services. 
The Regulation provides a framework for issuing and authenticating 
digital identity, identity documents, and biometrics in the non- 
banking financial sector. 


The regulation empowers companies licensed as non-banking 
financial services to provide identity verification and related 
services. The regulation, however, requires strict compliance with 
technology infrastructure, information systems, and after-risk 
recovery and resiliency standards stipulated in the Regulation. 


Furthermore, the Regulation requires all service providers of the 
non-banking services to be registered. Providers must also 
become joint stock companies within a defined period and secure 
an insurance policy against technological and professional liability. 
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Registration, Passport, and Citizenship (DNRPC) is Zambia's 

foundational ID for identity verification. Functional IDs like voter 
KYC Verification Re quirements: cards, driver's licenses and passports can also be used to verify 
Name, Address, ID identities. 


e 
AS 
Za eal b j rs | i l The National ID card issued by the Department of National 


= al |e 


Acceptapdie J) Documents 

National ID, Voter's ID, Driver's License, Passport, Registration Card sili |=) 

ic Date ctorace P Population Population with ID 
10 years 

Data Compliance Regulation: ai? Had 


Zambian Data Protection Act 


Median Age Primary ID Issuer 


Population with ID represents people 15 years+ 
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Se Nn egal The national ID card issued by the Agence Nationale de la 


Statistique et de la Démographie (ANSD) is the foundational ID for 
identity verification in Senegal. Voter IDs, passports, driver's 


KYC Verification Requirements: licenses and the Ecowas ID can also be used to verify the identity 
Name, Date of Birth, Passport Photograph, ID Document of a legal resident or citizen. 


Acceptable ID Documents: 


National ID, Voter's ID, Driver's License, Passport, Ecowas ID sili |=) 
: Population Population with ID 
KYC Data Storage Period: 18.1 million 72% 
10 years 
, . <a 
Data Compliance Regulation: ai? TAL} 
Act Concerning Personal Data Protection (CPDP) Median Age Primary ID Issuer 


18 (Agence Nationale de la Statistique 
et de la Démographie, ANSD) 


Population with ID represents people 15 years+ 
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Ca ‘eal Ee roo Nn National ID cards issued by the Cameroonian Ministry of Territorial 


Administration are the foundational ID for identity verification in 
Cameroon. Voter IDs, driver's licenses, passports, and resident 


KYC Verification Requirements: cards can also be used to verify the identities of citizens and 


Name, Address, ID Document residents. 


Acceptable ID Documents: 


National ID, Voter's ID, Driver's License, Passport, Resident Card sili |=) 
: Population Population with ID 
he Data Storage Period: 28.5 million 76% 
< : —_ 
Data Compliance Regulation: oi? ara 


N/A (Privacy Bill in the works) 


Median Age Primary ID Issuer 
17.4 General Delegation 
for National Security 


Population with ID represents people 15 years+ 
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Cote D’ Ivol re The Office National de I'Etat Civil et de I'ldentification 


issues national ID cards that serve as the foundational ID 

document for identity verification in Cédte d'Ivoire. Passports, 
KYC Verification Requirements: driver's licenses, resident cards and health insurance identity 
cards are functional documents that can also be used to verify 
identities in the country. 


Name, Address, ID Document 


Acceptable ID Documents: 
National ID Card, Driver's License, Passport, Health Insurance Card, 
Attestation Card, Resident Card 


Cdte D'Ivoire considers Startup Act 


KYC Data Storage Period: As part of its commitment to fostering innovation and 

10 years entrepreneurship, the government of Céte D'Ivoire has announced 
plans to launch a Startup Act in the near future. While the exact 
date of the launch is unknown due to the act still being considered 

Data Compliance Regulation: by the country’s parliament, government officials insist it is driven 

Protection of Personal Data Law of 2013 by a strong political will to create an enabling ecosystem for Ivorian 


startups. 


The startup act is expected to provide state-of-the-art 
infrastructure and other amenities to help them succeed regionally 
A and internationally. 

stil 25) ' 

Population Population with ID In addition to the startup act, the government has put in place 
plans for technology parks and start-up campuses that it hopes 
will help the country become a hub for innovation and 
entrepreneurship. 


si? Tall 


Median Age Primary ID Issuer 


Population with ID represents people 15 years+ Source: |TechCaba 
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Africa’s Digital ID 
transition: Countries to 


watch 


Burkina Faso 


The West African country has partnered with 
(Modular Open Source Identification Platform) 
MOSIP to pilot a national digital ID system. The 
pilot aims to complete 1000 enrollments; 
learnings from it will inform a national scale-up 
program to be designed in the future. 


Source: 


Kenya =: 


Kenya has announced plans to roll out the 
Unique Personal Identifier (UPI), a national digital 
ID system, and foundational document to serve 
as the primary identity document for Kenyans. It 
will replace the Huduma Namba which was 
introduced in 2019 but faced legal challenges to 
the enrollment procedures and data collection. 


Source: 
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As African countries strive to bring their identity systems up to date, many are 
turning to digitised systems to create a scalable process. Over the last few years, 
many African countries have committed to digitising their ID systems in 


partnership with the world bank's Identification for Development (ID4D) initiative. 


The digitisation of ID systems has many advantages, including streamlined 
administrative processes, better personal data security, improved accuracy, 


data-driven decision-making, and increased efficiency of identity verification 
processes. It also indicates a growing market for digital identity verification. Here 
is a list of countries that have recently made strides in their transition to digital- 


first ID systems: 


Following a successful 2022 pilot, Africa’s 
second-largest country by population has off 
digital enrollment for its foundational Fayda ID 
ID document for all citizens and residents with 
a goal of 45 million enrollees by the end of 
2024. 


Source: 


Madagascar ¢ 


Madagascar's government has entered a 
memorandum of understanding with MOSIP to 
execute a pilot of a new national digital ID 
system. The pilot is expected to enrol 1000 
people and provide learnings for future 
nationwide implementation 


Source: 


Gabon« 


Reports indicate that Gabon is launching a digital 
national ID system in December 2023, 10 years 
after ID cards were last issued in the country. 
The announcement was made by the country’s 
council of ministers who also announced an 
extension of the validity of existing ID cards. 


Source: 


Togo « 


The Togolese Agency for Identification, ANID- 
TOGO, has partnered with Atos and IDEMIA to 
build a national biometric elD system. The 
biometric ID system is expected to be built 
based on iris, face, and fingerprint recognition 
technology. 


Source: 


Fraud Trends 
Across Africa 
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The Big Story: Generative Al and Fraud 


Since the second half of 2022, Generative Al 
has dominated conversations because of its 
potential impact on increased efficiency, 
customer experience, and reduced costs due to 
automation. Al tools like ChatGPT, Dall-E, and 
Midjourney, among others, have also soared in 
popularity among everyday tech users, who use 
them to achieve tasks like research, content 
creation, image generation, task automation, 
and more with increasing efficiency. 

However, alongside the excitement, there are 
growing concerns among stakeholders in KYC/ 
AML and fraud-prevention communities about 
the potential use of Al for malicious purposes, 
i.e., fraud. Advancements in Al technology mean 
that fraudsters can create highly realistic 
versions of forged documents and make more 
sophisticated attempts at impersonating real 
people. 


Deepfakes are a highly sophisticated form of 
synthetic computer vision fraud where an 
existing image or video is replaced with 
someone else's likeness. These images can 
make it seem like the target did or said 
something they did not. Accomplished by 
superimposing facial images of real people onto 
videos or 3D computer vision models, deep 
fakes pose a significant challenge to the 
integrity of digital media. 


Similarly, text-to-image algorithms, or 
Generative Adversarial Networks (GANs), are 
computer vision technology that can generate 
realistic images from textual descriptions. 
Fraudsters can use these algorithms in identity 
fraud by creating synthetic images of 
individuals that do not exist. 


While we have yet to detect notable instances 
or patterns of Al-powered fraud in Africa, we 
advise businesses to take caution and tighten 
up loopholes in onboarding processes including 
using biometrics backed by government 
databases where possible. In the coming 
months, companies can expect to see more 
sophisticated attacks where attackers use deep 
fakes or GANs to try and game systems. In 
addition, an increased frequency of attacks 
should also be expected as Al accessibility is 
likely to drop associated costs with fake ID 
creation. 


Now, more than ever, it is essential for 
businesses to engage KYC partners that stay on 
top of industry trends and are continuously 
innovating to stay ahead of the market. By doing 
so, they can better safeguard their systems 
against the potential misuse of Al and protect 
themselves and their customers from the risks 
associated with fraudulent activities. 
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Common Types of Fraud 
Attacks 


01. Fake ID documents 


Fraudsters commonly use fake or forged ID documents to game a 
product's onboarding system. Using forged ID documents, 
fraudsters can create accounts under fictitious identities, 
facilitating the theft of ill-gotten gains. Depending on how skilled 
the fraudster is, forged documents can closely resemble the 
original, allowing them to bypass basic evaluations and eye tests. 


Our Document Verification™ product effectively detects such fake 
IDs by comparing the submitted documents to their authentic 
templates. This process scrutinises intricate details such as fonts, 
spacing, holograms, microtext, QR codes, barcodes and 
watermarks that are challenging to imitate, ensuring fraudulent 
users are identified and stopped. 


In H1 2023, 8% of the documents submitted to Smile ID failed 
these security feature checks. 
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Every day, we help companies across Africa prevent fraud by 
catching fraudulent users during onboarding. As preventive 
technology advances, so do the techniques that fraudsters deploy. 
Here are some fraud tactics we've seen over the last six months. 
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02. Stolen ID information 


At Smile ID, we find that the majority of fraud attempts involve the 
use of stolen IDs. This transpires when an individual attempts to 
register for a service using a document or ID number that belongs 
to someone else. As these IDs are genuine, a basic KYC check 
(focusing solely on textual validation) might mistakenly approve 
them. 


Our Biometric KYC solution effectively counters such attacks by 
comparing user-submitted selfies to official ID photos or 
documents, swiftly identifying and blocking discrepancies. This 
process ensures that the person interacting with the service is the 
legitimate ID holder. This critical component of identity verification 
extends beyond merely validating the legitimacy and authenticity 
of an ID or document. 


Of all the biometric fraud attempts Smile ID caught in H1 2023, 
43% were cases where an ID was valid, but the selfie provided 
did not match the ID owner. 


of 
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03. Selfie “Spoofs” 


More sophisticated scammers with stolen IDs attempt to pass 
themselves off as the owners of the documents. One way they do 
that is through a "selfie spoof," where a person uses a photo to 
impersonate someone else. This can include using a picture of a 
printout, a saved image or video from a device, a printed face 
mask, or even a life-size cardboard cut-out. These spoofs are 
commonly referred to as "cheap fakes.” While similar behaviour 
may result from genuine user error, such as not following 
instructions or not understanding the process, spoofs often 
indicate a fraudster's attempt to impersonate another person. 


Our liveliness checks ensure that the selfie submitted is a live 
image of the individual and not a pre-recorded video or 
photograph. 


Selfie spoofs made up 41% of biometric fraud caught by Smile 
ID in the first 6 months of 2023 


Register User selfie 
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04. Duplication Fraud 


This type of fraud occurs when individuals create multiple 
accounts with a single service provider to exploit reward systems. 
Such schemes are particularly prevalent among companies that 
implement promotional incentives—such as referral bonuses or 
sign-up rewards—to drive rapid growth. The primary aim of such 
fraudsters is to get away with multiple rewards by creating multiple 
accounts. 


There are two main types of fraudsters involved in this activity. The 
first type is "Serial Submitters,” who repeatedly submit the same ID 
information or multiple valid IDs of themselves to gain access. 
While this type of fraud can be pervasive, its success largely hinges 
on the fraudster's resilience. It can be mitigated by implementing 
sign-up limits or checks against previously used ID numbers. 


The second type of fraudster is known as a "Database Infiltrator." 
These highly sophisticated fraudsters have unauthorised access to 
ID authority databases, allowing them to create multiple seemingly 
legitimate identities. This type of fraud poses a greater risk to any 
system as their documents will appear valid even during biometric 
government database or liveness checks. The only way to detect 
this type of fraud is through biometric de-duplication. At Smile ID, 
we have seen a user attempt to sign up nearly 300 times with 
multiple valid IDs. Our biometric de-duplication product Smile 
Secure was able to identify and surface these repeat attempts. 


Learn more on page 60. 


Enter user details 


Select Country 


Kenya 


First Name 


FO IR 


Last Name 


FE OR RR 


Select ID Type 


National ID 


Enter ID Number 


Se a ok oe aa a 


Continue 


A User already registered 


ww.usesmileid.co 


STATE OF KYC IN AFRICA 


05. Synthetic Fraud 


This happens when fraudsters create a new identity by combining 
real (usually stolen) and fake information. Synthetic fraud is usually 
more difficult to catch, especially when using only textual 
verification, as scammers can add a stolen ID number to a falsified 
document template to fool KYC systems. 


While synthetic fraud attempts have typically been low across 
Africa, recent advancements in Al technology make it a real threat 
to businesses. Using Al image and video generators, scammers 
may be able to combine real ID information with forged document 
templates and deep fake biometrics to evade customer verification 
procedures. 


Combining Document Verification with Liveliness Checks can 
detect this kind of fraud as we can spot discrepancies in fake ID 
documents that natural observers cannot catch. 
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06. Business Registration Fraud 


B2B businesses also deal with their fair share of fraud. A prevalent 
tactic fraudsters employ involves utilising fake or compromised 
business registration details to game onboarding systems and 
create fictitious accounts. This type of fraud can lead to 
considerable financial losses and undermine user trust If not 
addressed. Financial services and e-commerce companies are 
typically the primary targets of such schemes. 


Verifying business registration details is a crucial component of our 
Know Your Business (KYB) solution. This encompasses validating 
the business name, address, tax information, and identity data of 
directors, shareholders, and other relevant stakeholders, ensuring a 
secure and trustworthy environment for all parties involved. 
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Secure your business: 
How identity verification 
helps companies 
prevent fraud 
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¢C C Identity verification is a critical tool in the fight against 


fraud for any consumer-facing product. Fraudulent users will 
often try to hide their real identities to get access to systems. 
Strong identity verification measures discourage a significant 
percentage of fraudulent users because they have to use their 
real identities to create accounts. Also, in the event that a user 
performs fraudulent actions using your product, identity 
verification measures make it easier to support and comply 
and law enforcement efforts.” 


& Elijah Kingson 
Chief Product Officer and Co-founder at PayDay 
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Document Verification: 
A critical tool for fraud 
prevention 


Collecting and verifying user-submitted identity documents, such 
as driver's licences or passports, is the most common method of 
KYC globally. Document Verification checks the authenticity of a 
document and compares the document photo to a selfie. 


Smile ID’s document verification solution enables you to verify 
over 8,500 documents across 226 countries globally and the 
ability to add support for more documents, upon request. We also 
have true depth of coverage in Africa, with support for at least 3 
document types for every African country. 


How it Works: 


A user submits a photo of an ID document and a selfie, and the 
following checks are completed: 


— 


. The document will be authenticated to ensure it is a real and valid 
ID document. 

2. Security features on the document, such as barcodes, 
holographs, and watermarks, will be verified. 

3. The photo on the document will be matched to a selfie to verify 
that the ID belongs to that user. 

4. Optical Character Recognition (OCR) reads and returns the 

textual information on the document. 
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In addition to helping businesses keep up with KYC requirements 
and expand into new markets, document verification Is critical for 
keeping out users with forged or stolen IDs. Companies can build a 
robust anti-fraud solution capable of keeping malicious actors out 
when combined with other tools like Biometric KYC, Face 
Deduplication, and AML Checks. 


Add additional security layers on top and customize 


ok Verify the user's ID document 


your flow 


ip © AML Check 
4 Government Database Check 


Duplicate user detection 


Get real-time results 
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Why Smile ID’s Document 
Verification is the best 


< 


Technical integration options 
for every device and OS 
combination. 


PTS 


3 or more ID types covered in 
the majority of African 
markets. 


ro4 
OCR 
oe 


OCR extracted personal 
information returned with 
96% accuracy. 


© 


“No Code” solutions for 
business distribution to users 
via link, website or email. 


° 
80% 

80% user approval rate on key 
African ID types. 


BC) 


Backed by human review 24/7 
at no extra cost improving 
fraud detection results by 
15%. 
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a Bridgecard 


Overview 
Switching to Smile ID allowed ui Goal: Pan-African regulatory compliance 
Bridgecard to achieve a 216% increase ah Industry: Payments 
in revenue while reducing card issuing 9 


. e “ Countries Using Smile: Angola, Benin, 
downtime by 41% 


Cote D'lvoire, Cameroon, Rwanda and more 


The Problem The Solution Impact 


Bridgecard faced multiple challenges in Smile ID's document verification solution was 41% reduction in card issuing downtime 
expanding their card issuing services in invaluable for Bridgecard's expansion, enabling card Expansion into 20 markets across Africa 
Africa, including the threat of fraud in the services in countries with inadequate or non-existent 216% increase in revenue due to expansion & 
payments industry and difficulties with ID databases by verifying users who would have card creation increase 

finding a KYC solution that could perform otherwise failed KYC. 57% month-to-month growth in card creation 


verifications across multiple African countries due to seamless KYC verification process 


Testimonial 


“We had clients from all over Africa asking if we could provide card infrastructures for customers in their country. With Smile ID coverage across Africa, we were 


able to scale from 4 to 20 countries in six months.” 


- Festus Owumi, Chief Technology Officer 
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Biometric KYC for ID 
verification 


Biometric KYC refers to using biometric characteristics, such as 
fingerprints, facial recognition, iris scans, and voice recognition, to 
verify individuals’ identity during the KYC process. In recent years, 
it has emerged as a potent tool for combating fraud, particularly 
as criminals increasingly find ways to obtain or fabricate valid ID 
numbers that can pass conventional text-based ID verification. 


Biometric traits are unique to individuals, making them difficult to 
replicate or forge. Unlike passwords which can be forgotten, 
stolen, or shared, biometric data is inherent to each person and 
remains constant. 


Biometric KYC systems have advanced algorithms that analyse 
and compare biometric data to identify anomalies and 
inconsistencies. By cross-referencing biometric information with 
existing databases, these systems can detect patterns associated 
with fraudulent activities, such as multiple registrations under 
different names or attempts to manipulate biometric features. 
Suspicious activities can be flagged and investigated, preventing 
fraud before it occurs. 
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Why selfies are the go-to 
choice for biometric 
authentication 


Even though other options have merits, facial recognition 
has become the preferred biometric KYC method 
worldwide in recent years. 


The accessibility of facial recognition technology serves as 
a key factor in its widespread adoption. Specialised 
equipment is often required for fingerprint, iris, and voice 
recognition, making them less accessible. In contrast, facial 
recognition is easily performed using the front and back- 
facing cameras found on most smartphones, allowing users 
to access the technology anytime, anywhere. Additionally, 
the popularity of the “selfie-style’ picture format among 
smartphone users presents a non-intrusive, user-friendly 
way to capture facial biometric data. 


Increased security also contributes to facial recognition 
technology's popularity. Although all biometric data is 
unique to each individual, some forms are easier to 
fabricate than others. Al-generated voices can deceive 
voice recognition software by closely mimicking an 
individual's voice. Fingerprint recognition software has 
proven to be easily bypassed as well. In contrast, facial 
recognition programs are the most difficult to circumvent, 
as they can incorporate liveliness checks and anti-spoofing 
technology to ensure the user's authenticity. 
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Smile ID’s 
Biometric KYC 


Smile ID has been at the forefront of leveraging 
Biometric KYC for remote onboarding across 


Africa, enabling our clients to rapidly and if 
securely scale their user base to millions. Our J 


Biometric KYC solution at Smile ID involves 
matching a user's submitted selfie with the 
photo on their Government-issued ID 
documents. 


This approach combines the reliability of document verification 
with the added assurance of biometric comparison, ensuring that 
your users are indeed who they claim to be. 


To achieve this, we utilise our proprietary facial verification 
technology called SmartSelfie™, which is coupled with document 
verification. This combination allows for a de-biased and highly 
accurate comparison between a user's selfie and the image on 
their identification document. 
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Liveness checks using 
SmartSelfie™ 


A strong anti-spoof system should back up biometric 
checks to ensure customer safety. While sophisticated 
attacks like “deep fakes” are still relatively uncommon in 
Africa, so-called “cheap fakes” are prevalent. These include 
photos of screens, uploading static photos, or wearing 
masks. These types of fakes can easily be prevented with a 
liveness check. Liveness algorithms complement and 
augment face recognition, resulting in robust onboarding 
that users understand and app developers can trust. 


Many apps that leverage liveness detection capture a short 
video of the user during registration. Alternatively, some 
apps grab a quick succession of frames and/or audio while 
the user performs a specific motion or gesture. The liveness 
solution processes the visual/audio data audio with 
specialised algorithms, generating a mathematical 
confidence score on whether a real human was present 
during image capture. Humans can review and label results 
for further algorithm training and refinement. 


At Smile ID, we have been working on face recognition and 
liveness solutions since 2016. Our trademarked technology 
— SmartSelfie™ — uses 6 Al-based models and is backed by 
real-time reviewers that label thousands of images daily for 
machine learning purposes. SmartSelfie™ technology 
powers our mobile and web solutions. 
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a Yellow 
Card 


Overview 
Yellow Card automates KYC in 16 ul Goal: Pan-African regulatory compliance 
countries while complying with KYC/ fi Industry: Crypto 
AML requirements 2 Countries of Operation: Botswana, 


Cameroon, Malawi, Céte d'lvoire, and 12 more 


The Problem The Solution Impact 


Crypto companies face a high degree of Using a mix of KYC solutions including document ¢ Became first licensed crypto provider in 
regulatory scrutiny but conforming to verification, government database checks and Botswana 

varying regulations while operating in biometrics face matching has allowed Yellow Card ¢ Digitally verified 300M+ users 

many markets can be complicated. to stay compliant while scaling into 16 countries and ¢ Scaled to 16 countries across Africa 


counting. 


Testimonial 


“Working with Smile has improved our KYC in key markets but also as we expand across Africa. Together, we have solved problems customers are dealing with from 


a mobile device that can’t take a picture clearly to how quick we can get information stored and vetted. It’s been quite amazing to work with the Smile ID team.” 


- Mandy Naidoo, Chief Compliance Officer 
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Face Deduplication 


Fraudsters that create multiple accounts to collect promotional 
rewards or loans are committing a duplication attack. These 
efforts are usually only worth it for the attacker if they can 
successfully sign up for many accounts. While fraudsters have 
found ways to infiltrate ID systems and generate multiple ID 
numbers, it is much more difficult for them to alter their face. 
Biometric de-duplication performs a one-to-many search (1:N), 
looking for a single face among thousands or millions of other 
faces. 


Deduplication is a potent tool to prevent duplicate account fraud. 
In practice, deduplication searches a history of faces that have 
been previously onboarded and alerts you if the same face is 
attempting to sign up again. This will flag a duplicate sign-up 
regardless of country, ID type, ID number, name, or date of birth. 
Deduplication is the most effective deterrent for organised 
attacks on promotional sign-up codes. 


Smile Secure from Smile ID is our proprietary tool that stops 
duplication fraud. It scans new incoming selfies in real-time during 
onboarding and notifies you in seconds if an incoming face has 
been onboarded to your service in the past, regardless of ID type. 
To date, Smile ID has detected over 1.7 million duplicate faces for 
our customers & Smile Secure was able to identify and surface 
these repeat attempts. 


to learn more. 
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AML Check 


AML due diligence is a crucial business compliance requirement, 
particularly when dealing with politically exposed persons (PEPs). 
It identifies and filters high-risk customers who may be listed on 
sanction lists, political watchlists or even mentioned in adverse 
media. These higher-risk customers, especially those on sanction 
lists, are more likely to require close monitoring through Enhanced 
Due Diligence (EDD) measures. By identifying these potential 
threats, businesses can take appropriate actions, such as blocking 
them or implementing enhanced KYC checks. 


AML Checks are an effective tool in preventing fraud or misuse of 
your products by identifying users who with higher risk profiles, as 
they allow businesses to compare customer details against 
sanction lists to assess their level of risk. 


Smile ID's AML Check enables businesses to conduct due 
diligence on customers by swiftly screening them against over 
1,100 global watchlists, lists of politically exposed persons, and 
adverse media publications. Within seconds, the product provides 
information on whether the screened customers are found on any 
of these lists, along with corresponding details. This information 
can then be utilised to evaluate the associated risks the 
customers pose. 
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Know Your Business 


Know Your Business (KYB) procedures are imperative for B2B 
service providers who face a wide range of fraud-related threats, 
including business identity fraud, money laundering, and sanction 
violations. B2B service providers must verify that the businesses 
they serve are who they say they are, do what they say they do, 
and are owned by the people they claim to be owned by. 


Smile ID’s KYB solution helps B2B businesses conduct due 
diligence on corporate clients. More than just verifying the 
business registration names and numbers, we help companies 
verify the identities of beneficiaries from the business. Our KYB 
solution takes the customers’ business registration number and 
returns due diligence information, including business registration 
name, tax number, shareholder, director, and beneficial owner 
information. 
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How to protect yourself from 
ID-related fraud 


Identity verification on peer-to-peer 
platforms is both a security feature anda 
compliance requirement. Verified users are 
less likely to be fraudulent, so a user's 
verification status signals trust. It's best to 
avoid transacting with unverified accounts 
as they carry a higher risk for fraud. 
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Share information 
with caution 


Scammers use tactics like phishing and 
impersonation to trick individuals into 
revealing personal identification details. 
This stolen information can be used to 
access victims’ accounts. Therefore, it's 
vital to share identity-related information 
only with reputable organisations. 
Legitimate entities wont request sensitive 
details via unsolicited calls or emails. If a 
request seems suspicious, it's best to 
decline and contact the organisation 
through official channels to confirm its 
authenticity. 


03 


Obtain and review your 
credit report regularly 


Identity theft can result in fraudulent 
accounts and unauthorised loans that 
damage your credit rating. To prevent this, 
review your credit report annually for any 
inaccuracies or suspicious activities. Early 
detection allows for immediate action, 
helping to protect your credit score from 
potential harm. 


02 


Monitor accounts for 
suspicious activities 


If you notice suspicious activities like unfamiliar 
logins or unauthorised transactions on your 
accounts, it might indicate a compromise. 
Regularly reviewing your financial statements can 
help detect such activities. If you spot anything 
unusual, report it to your financial institution 
immediately. Stay vigilant, frequently change 
passwords, and use unique, strong passwords for 
each account to minimise the risk of identity 
theft and financial loss. 
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Avoid transacting with 
unverified accounts 
where possible 


Identity verification on peer-to-peer 
platforms is both a security feature and a 
compliance requirement. Verified users 
are less likely to be fraudulent, so a user's 
verification status signals trust. It's best to 
avoid transacting with unverified accounts 
as they carry a higher risk for fraud. 
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Report stolen/missing 
ID documents as soon 
as noticed 


Report stolen or missing identity 
documents to authorities and financial 
institutions immediately to prevent 
fraudulent use. Reporting can aid in 
recovering or replacing the document and 
protect against nefarious activities, as a 
significant percentage of fraud is 
facilitated by stolen IDs. 
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